Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: gffz9UCcQT64MsiA006xXyxtiaK8utcZk8VGS9kdNco=
Subject key identifier: 86:2B:3F:62:95:C9:B3:EB:CF:0A:1D:1C:67:F3:8B:6D:E2:DC:B2:18
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 019748C314CB77012A20EAD6926FCD51F1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 093E
Signing time: Sat 07 Jun 2025 05:00:33 +0000
Manifest this update: Sat 07 Jun 2025 05:00:33 +0000
Manifest next update: Sun 08 Jun 2025 05:00:33 +0000
Files and hashes: 1: 40yNe5drs03KBqTPteFk6f_6lOI.roa (hash: +9sbecufhXxr3UfhY0K/1Ke1i8FJRZHe8knUxyECWgU=)
2: NTRuSteXMEXLvayahODmi046fpw.roa (hash: f1MFdssa3cdYy5ca/ZRwnxiIjLIP7jvC8Sw0s1pkpF8=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: 8aO6ORyY9sz6D24+xeIKIF/4sOT8LzQXBlj3pdvUyIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:14:cb:77:01:2a:20:ea:d6:92:6f:cd:51:f1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Jun 7 05:00:33 2025 GMT
Not After : Jun 8 05:00:33 2025 GMT
Subject: CN=862b3f6295c9b3ebcf0a1d1c67f38b6de2dcb218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:ee:c5:47:8b:9d:21:62:8f:08:97:62:2a:
cb:6d:9e:23:4c:e1:2e:2b:b1:cf:57:2a:d0:f0:ca:
28:44:8f:7d:16:7c:d5:bf:d6:0a:6f:7e:3b:42:ad:
e5:6a:a2:23:5f:78:e4:62:60:29:43:a6:78:33:d3:
e9:aa:2f:8e:2d:e0:05:ae:79:22:1a:0f:d4:c8:fd:
02:d3:60:c3:70:48:c2:b2:70:62:74:d5:7d:78:85:
13:5b:16:ab:b1:0d:a0:41:60:c2:e9:23:6c:c5:2c:
63:0e:52:bd:08:1c:14:24:c8:d6:b8:73:3c:23:44:
bf:00:4c:4a:22:c1:ff:60:16:bf:da:30:11:bc:a3:
de:ca:a0:77:cc:2a:fe:98:5c:ca:98:c6:c5:94:ee:
06:d5:d0:35:53:7c:bc:c7:9c:f2:87:07:d1:3b:fc:
e8:fe:d1:1d:a4:1f:2d:a2:bb:21:74:88:b7:3d:0a:
13:a8:8e:c8:1a:20:9b:2f:5a:16:11:09:66:c0:df:
e1:d5:20:5d:34:14:22:11:6e:7f:18:bc:90:c1:4d:
84:72:47:81:24:3a:18:60:c4:3f:7f:30:ac:0f:0a:
fd:c6:e7:08:03:e6:b6:a6:47:45:ba:48:fe:73:27:
75:4f:c0:c0:c8:61:93:6a:d1:43:f5:2f:be:ed:1a:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2B:3F:62:95:C9:B3:EB:CF:0A:1D:1C:67:F3:8B:6D:E2:DC:B2:18
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:41:da:07:5e:cb:47:b4:7e:f2:94:8e:11:87:8e:43:8f:a6:
cd:1f:c0:13:8d:1c:e8:1c:4b:c6:4a:a9:60:aa:2a:a1:ff:e6:
67:d1:ca:38:a5:e2:8f:dc:5c:60:9c:b2:97:5d:63:d8:87:3c:
22:89:a3:c1:c6:cb:44:41:d4:81:69:e5:bc:c7:cb:de:06:56:
53:37:50:8d:25:76:d1:1f:d8:45:35:93:db:06:e6:dd:0c:b9:
b4:a3:f0:52:c5:b1:af:7c:c3:9e:8e:29:65:21:3a:fc:48:fb:
86:2c:34:b0:20:c6:9c:82:d2:4b:66:e0:07:f9:af:b7:e5:65:
56:76:b1:0e:a5:9f:f5:33:e7:fe:35:fd:a7:58:2e:51:c1:70:
de:a9:68:b8:33:92:f2:04:92:50:e2:bc:6d:21:37:eb:00:11:
0b:4a:c4:f0:57:96:fc:73:0f:1f:e3:29:0d:e5:a4:48:5f:69:
4a:15:d1:f5:6b:01:42:0a:0b:99:e2:59:6e:ca:a8:b6:fb:29:
dc:c8:f6:e1:2c:65:7a:b6:05:b3:f8:db:8b:51:95:45:47:a2:
cc:9b:d3:c4:7e:10:16:9f:df:13:0e:50:91:e5:2c:8f:10:71:
da:a7:4a:a5:dd:3d:cb:43:eb:9f:2e:f3:d7:f4:ce:ea:c4:b0:
23:52:b5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:29:40 2025 by rpki-client